Senior Software Engineer of Security Tech Control Validation Development

The mission of TikTok's Global Security Organization is to build and earn trust by reducing risk and securing our businesses and products. Also known as "GSO", this team is the foundation of our efforts to keep TikTok safe, secure, and operating at scale for over 1 billion people around the world. We work to ensure that the TikTok platform is safe and secure, that our users' experience and their data remains safe from external or internal threats, and that we comply with global regulations wherever TikTok operates.

Trust is one of TikTok's biggest initiatives, and security is integral to our success. In whatever ways users interact with us — whether they're watching videos on their For You page, interacting with a Live video, or buying products on TikTok Shop — GSO protects their data and privacy, so they can have a secure and trustworthy experience.
Security Tools Operations and Validation team's responsibilities include designing and implementing cyber security solutions that address the organization's needs, assessing risks and vulnerabilities, and developing strategies to mitigate them, validation of security technical controls in cybersecurity domains.

The role will be responsible for design and development of our state of the art Security Tech Validation Framework, working with each domain's validation team to board their validation onto the Framework. The validation framework will provide solid platform support to GSO's maturity measurement effort, evaluating gaps in TikTok family products. The role will be key for us to streamline the development, testing, deployment, and operation of the validation framework.

Responsibilities
- Design, and implement open and scalable security validation frameworks to automate security testing, validation, and reporting processes
- Implement security validation in different security domains, including network security, cloud security, endpoint security, Secure SDLC, Identity and authentication etc, by using the validation framework
- Setup DevOpsQA process for security validation framework, setup and maintain the CI/CD pipeline of release
- Troubleshooting for the validation framework, making sure it meets the SLA we promised
- Being technical support for validation customers, solving technical problems from customersMinimum Qualifications
1. Proficient in one of the programming languages: Python, Java, Go, Bash, C/C++, shell;
2. Strong experience with security automation frameworks and tools (e.g., Selenium, Ansible, Jenkins, Chef, Puppet). Having test automation framework implementation experience is a big plus.
3. Basic knowledge of cybersecurity domains
4. Excellent team-working skills are needed.
5. Experience working through different time zones.
Preferred Qualifications
1. A bachelor's degree in computer science, information technology, cybersecurity, or a related field is usually required.
2. 5 years development experience in one of the programming languages: Python, Java, Go, Bash, C/C++, shell; Having excellent debugging skills, trouble shooting skills